DEBIAN-CVE-2016-2548

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service system crash via a crafted ioctl call, related to the 1 sndtimerclose and 2 sndtimerstop functions...

MS16-048: Description of the security update for CSRSS: April 12, 2016

None None...

Stop Motion Studio - Base64 encoded String, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Stop Motion Studio published at the 'play' market has multiple vulnerabilities...

Stop-Motion Movie Creator - Apache license, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Stop-Motion Movie Creator published at the 'play' market has multiple vulnerabilities...

PicPac Stop Motion & TimeLapse - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PicPac Stop Motion & TimeLapse published at the 'play' market has multiple vulnerabilities...

Stop, Breathe & Think - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Stop, Breathe & Think published at the 'play' market has multiple vulnerabilities...

Smoke Free, stop smoking help - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Smoke Free, stop smoking help published at the 'play' market has multiple vulnerabilities...

Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass

Using the plugin "Stop User Enumeration 1.3.3" is possible bypass it to get the usernames. PoC Blocked: http://www.example.com/?author%00=%001 Passed: http://www.example.com/?bypass=1%00=1...

Fix weblogic JAVA deserialization vulnerability of a variety of methods-vulnerability warning-the black bar safety net

The current oracle is also not in the publicly released weblogic JAVA deserialization vulnerability official patch currently see the repair method is nothing more than two: Use SerialKiller replace the sequence of operation of the ObjectInputStream class; In does not affect the business case, the...

UBUNTU-CVE-2016-2841

The ne2000receive function in the NE2000 NIC emulation support hw/net/ne2000.c in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via crafted values for the PSTART and PSTOP registers, involving ring buffer control...

UBUNTU-CVE-2016-2548

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service system crash via a crafted ioctl call, related to the 1 sndtimerclose and 2 sndtimerstop functions...

Gratipay: stop serving grtp.co over HTTP

Target Domain: grtp.co 1 Issue Details: Service available on HTTP As per the policy details under scope on HackerOne portalhttps://hackerone.com/gratipay, the 'grtp.co'. should be available only on port 443 or HTTPS protocol. However grtp.co service is running on port 80 too i.e., running on HTTP...

Siemens SIMATIC S7-1500 Denial of Service Vulnerability (CNVD-2016-00931)

The Siemens SIMATIC S7-1500 is a controller family with a modular structure. A denial of service vulnerability exists in Siemens SIMATIC S7-1500 versions prior to 1.8.3 when processing specially crafted TCP packets. An attacker can exploit the vulnerability to cause the CPU to automatically reboo...

CVE-2016-2200: Improper Input Validation

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

PT-2016-5061

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU devices versions prior to 1.8.3 Description The issue allows remote attackers to cause a denial of service, resulting in a STOP mode transition, by sending crafted packets on TCP port 102. Recommendations For versio...

stop-scammers.com XSS vulnerability

Vulnerable URL: http://www.stop-scammers.com/login.asp?username=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 546233 Google Pagerank|...

PT-2016-5200

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue allows local users to cause a denial of service, resulting in a system crash, via a crafted ioctl call. This is related to the snd timer close and snd timer stop functions in the...

Stop Error "0x0000005D" or "0x000000C4" Appears When Installing Windows Server 2012 in XenServer 6.x

Stop Error "0x0000005D" or "0x000000C4" appears when starting a Virtual Machine from the Windows Server 2012 ISO, in order to install the system. The error occurs right after loading the setup files, before the actual setup starts...

JVN#51250073: CG-WLNCM4G may behave as an open resolver

CG-WLNCM4G provided by Corega Inc is a network camera. CG-WLNCM4G contains an issue where it may behave as an open resolver. Impact The device may be leveraged for use in a DNS amplification attack and unknowingly become a part of a DDoS attack. Solution Do not use CG-WLNCM4G As of December 25,...

Siemens Simatic S7 1200 CPU Command Module (MSF) Exploit

Exploit for hardware platform in category remote exploits Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-12...